Mac users beware: Experts say this attack “immediately stood out” as a major change in an attempt to spread malware.

• Hackers relaunch ClickFix attacks on macOS
• New method abuses script editor via URL scheme
• Campaign offers Atomic Stealer to exfiltrate sensitive data

Hackers are adding new variations to the old ClickFix attack to bypass recently introduced macOS protections while continuing to deliver infostealer malware to users’ devices, experts have warned.

Security researchers Jamf Threat Labs recently spotted such a campaign in the wild, having noted that until now, ClickFix attacks on macOS attempted to trick the victim into copying and pasting a command into the terminal.